Identity verification method using a central biometric authority

• US 7,246,244 B2
• Filed: 06/15/2005
• Issued: 07/17/2007
• Est. Priority Date: 05/14/1999
• Status: Expired due to Term

• Current Assignee: FusionArc Incorporated
• Original Assignee: FusionArc Incorporated
• Inventors: Nanavati, Rajkumar, Nanavati, Samir H.
• Primary Examiner(s): SMITHERS, MATTHEW
• Application Number:
  US11/153,221
• Publication Number:
  US 20050251688A1
• Time in Patent Office: 762 Days
• Field of Search: 726/9, 726/20, 726/17, 726/18, 726/19, 902/2, 902/3
• US Class Current: 713/186
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

A method performs biometric verifications to authenticate the identification of users using a central biometric authority (CBA). This allows parties to an electronic transaction to be assured of each other'"'"'s identity. Specifically, at the sender side, a first message to a receiver is generated, wherein the first message includes a message text and a unique message identifier (UMI). At the sender side, a second message concerning a posting to the CBA is also generated, wherein the second message includes the sender'"'"'s biometric sample, the UMI, and the sender'"'"'s submission profile record. At a receiver side, it is decided that if a receiver wishes to verify the sender'"'"'s identity and if so, the first message is automatically verified. At the receiver side, a third message concerning a receiver'"'"'s posting to the CBA is issued, the third message including only the UMI, as received from the sender side. Finally, at the CBA, a reply to the third message is provided, the reply including the sender'"'"'s verification result.

Claims

1. A method for processing information from a first party to a transaction, comprising the steps of:

obtaining a direct biometric sample from the first party to the transaction, without requiring a private code;

processing the first party'"'"'s direct biometric sample to create biometric data;

comparing the first party'"'"'s biometric data, without the private code, against biometric information previously stored in a database of a third party that has biometric information from a plurality of parties;

generating a result based on the comparison;

transmitting the result of the comparison to the second party to the transaction.

2. The method of claim 1, wherein the processing step processes a biometric sample of a proxy for the first party, and

transmits the result of a comparison of the proxy'"'"'s biometric sample, with previously stored biometric information of the proxy, to the second party to the transaction.

3. The method of claim 1, wherein the biometric data contains sample features derived from the biometric sample.

4. The method of claim 1, wherein the direct biometric sample and the biometric data contain different amounts of data.

5. The method of claim 1, wherein the biometric data cannot be reverse-engineered to create the biometric sample.

6. The method of claim 1, wherein the third party is made up of a plurality of processors that form one virtual authority.

7. The method of claim 1, wherein the direct biometric sample is obtained from the first party utilizing a device that is not a handheld wireless portable device.

8. The method of claim 1, wherein the direct biometric sample is obtained from the first party utilizing a fixed point of sale system.

9. The method of claim 1, wherein the private code is a personal identification number (PIN).

10. The method of claim 1, wherein the first party to the transaction and the third party are not within arm'"'"'s reach of each other.

11. The method of claim 1, wherein the first party to the transaction and the third party are not located within the same physical facility.

12. The method of claim 1, wherein the first party does not have direct physical access to the third party.

13. The method of claim 2, wherein the first party to the transaction is an authorized transactor, and the second party is a point of transaction operator.

14. The method of claim 13, further comprising the steps of:

generating, by a point of transaction operator, a message to the third party, wherein the message includes the authorized transactor'"'"'s claimed identity, biometric information from the authorized transactor and a submission profile of the point of transaction.

15. The method of claim 1, wherein the obtaining step also includes additional information about the first party used by the third party.

16. The method of claim 15, wherein the additional information is public data.

17. The method of claim 15, wherein the additional information is private data.

18. The method of claim 15, wherein the additional information is selected from the group consisting of the first party'"'"'s date of birth, place of employment, group affiliations, company affiliations, and point of transaction loyalty club affiliations.

19. The method of claim 15, wherein the additional information is selected from the group consisting of the first party'"'"'s credit card, debit card, financial institution routing number, financial institution account number, electronic funds transfer, wire funds transfer, and electronic check information.

20. The method of claim 15, wherein the additional information is selected from the group consisting of the first party'"'"'s allergies, health conditions, medical history, credit rating, and health insurance information.

21. The method of claim 15, wherein the additional information is used by the third party to limit the database search.

22. A method for processing information from a first party to a transaction, comprising the steps of:

obtaining a direct biometric sample from the first party to the transaction, without requiring a private code;

transmitting the direct biometric sample to a remote third party having a database that contains biometric information from a plurality of parties;

processing the first party'"'"'s direct biometric sample to create biometric data;

comparing the first party'"'"'s biometric data, without the private code, against biometric information previously stored by the remote third party in the database;

generating a result based on the comparison; and

transmitting the result of the comparison to a second party to the transaction.

23. The method of claim 22, wherein the obtaining step obtains a biometric sample of a proxy for the first party, and

transmits the result of a comparison of the proxy'"'"'s biometric sample, with a previously stored biometric information of the proxy to the second party to the transaction.

24. The method of claim 22, wherein the biometric data contains sample features derived from the biometric sample.

25. The method of claim 22, wherein the direct biometric sample and the biometric data contain different amounts of data.

26. The method of claim 22, wherein the biometric data cannot be reverse-engineered to create the biometric sample.

27. The method of claim 22, wherein the third party is made up of a plurality of processors that form one virtual authority.

28. The method of claim 22, wherein the direct biometric sample is obtained from the first party utilizing a device that is not a handheld wireless portable device.

29. The method of claim 22, wherein the direct biometric sample is obtained from the first party utilizing a fixed point of sale system.

30. The method of claim 22, wherein the private code is a personal identification number (PIN).

31. The method of claim 22, wherein the first party to the transaction and the third party are not within arm'"'"'s reach of each other.

32. The method of claim 22, wherein the first party to the transaction and the third party are not located within the same physical facility.

33. The method of claim 22, wherein the first party does not have direct physical access to the third party.

34. The method of claim 23, wherein the first party to the transaction is an authorized transactor, and the second party is a point of transaction operator.

35. The method of claim 34, further comprising the steps of:

generating, by the point of transaction operator, a message to the third party, wherein the message includes the authorized transactor'"'"'s claimed identity, biometric information from the authorized transactor and a submission profile of the point of transaction.

36. The method of claim 22, wherein the obtaining step also includes additional information about the first party used by the third party.

37. The method of claim 36, wherein the additional information is public data.

38. The method of claim 36, wherein the additional information is private data.

39. The method of claim 36, wherein the additional information is selected from the group consisting of the first party'"'"'s date of birth, place of employment, group affiliations, company affiliations, and point of transaction loyalty club affiliations.

40. The method of claim 36, wherein the additional information is selected from the group consisting of the first party'"'"'s credit card, debit card, financial institution routing number, financial institution account number, electronic funds transfer, wire funds transfer, and electronic check information.

41. The method of claim 36, wherein the additional information is selected from the group consisting of the first party'"'"'s allergies, health conditions, medical history, credit rating, and health insurance information.

42. The method of claim 36, wherein the additional information is used by the third party to limit the database search.

43. A method for processing information from a first party to a transaction, comprising the steps of:

obtaining a direct biometric sample from the first party to the transaction, without requiring a private code;

processing the first party'"'"'s direct biometric sample to create the first party'"'"'s biometric data;

transmitting the first party'"'"'s biometric data to a remote third party having a database that contains biometric information from a plurality of parties;

comparing the first party'"'"'s biometric data, without the private code, against biometric information previously stored by the remote third party in the database;

generating a result based on the comparison; and

transmitting the result of the comparison to a second party to the transaction.

44. The method of claim 43, wherein the obtaining step obtains a biometric sample of a proxy for the first party, and

transmits the result of a comparison of the proxy'"'"'s biometric sample, with previously stored biometric information of the proxy, to the second party to the transaction.

45. The method of claim 43, wherein the biometric data contains sample features derived from the biometric sample.

46. The method of claim 43, wherein the direct biometric sample and the biometric data contain different amounts of data.

47. The method of claim 43, wherein the biometric data cannot be reverse-engineered to create the biometric sample.

48. The method of claim 43, wherein the third party is made up of a plurality of processors that form one virtual authority.

49. The method of claim 43, wherein the direct biometric sample is obtained from the first party utilizing a device that is not a handheld wireless portable device.

50. The method of claim 43, wherein the direct biometric sample is obtained from the first party utilizing a fixed point of sale system.

51. The method of claim 43, wherein the private code is a personal identification number (PIN).

52. The method of claim 43, wherein the first party to the transaction and the third party are not within arm'"'"'s reach of each other.

53. The method of claim 43, wherein the first party to the transaction and the third party are not located within the same physical facility.

54. The method of claim 43, wherein the first party does not have direct physical access to the third party.

55. The method of claim 44, wherein the first party to the transaction is an authorized transactor, and the second party is a point of transaction operator.

56. The method of claim 55, further comprising the steps of:

generating, by the point of transaction operator, a message to the third party, wherein the message includes the authorized transactor'"'"'s claimed identity, biometric information from the authorized transactor and a submission profile of the point of transaction.

57. The method of claim 43, wherein the obtaining step also includes additional information about the first party used by the third party.

58. The method of claim 57, wherein the additional information is public data.

59. The method of claim 57, wherein the additional information is private data.

60. The method of claim 57, wherein the additional information is selected from the group consisting of the first party'"'"'s date of birth, place of employment, group affiliations, company affiliations, and point of transaction loyalty club affiliations.

61. The method of claim 57, wherein the additional information is selected from the group consisting of the first party'"'"'s credit card, debit card, financial institution routing number, financial institution account number, electronic funds transfer, wire funds transfer, and electronic check information.

62. The method of claim 57, wherein the additional information is selected from the group consisting of the first party'"'"'s allergies, health conditions, medical history, credit rating, and health insurance information.

63. The method of claim 57, wherein the additional information is used by the third party to limit the database search.

64. A method for processing information from a first party to a transaction, comprising the steps of:

obtaining a biometric sample from the first party to the transaction, without requiring a private code;

transmitting the biometric sample to a remote third party having a database that contains biometric information from a plurality of parties;

comparing the first party'"'"'s biometric sample, without the private code, against biometric information previously stored by the remote third party in the database;

generating a result based on the comparison; and

transmitting the result of the comparison to a second party to the transaction.

65. The method of claim 64, wherein the obtaining step obtains a biometric sample of a proxy for the first party, and

transmits the result of a comparison of the proxy'"'"'s biometric sample, with previously stored biometric information of the proxy, to the second party to the transaction.

66. The method of claim 64, wherein the biometric data contains sample features derived from the biometric sample.

67. The method of claim 64, wherein the direct biometric sample and the biometric data contain different amounts of data.

68. The method of claim 64, wherein the biometric data cannot be reverse-engineered to create the biometric sample.

69. The method of claim 64, wherein the third party is made up of a plurality of processors that form one virtual authority.

70. The method of claim 64, wherein the direct biometric sample is obtained from the first party utilizing a device that is not a handheld wireless portable device.

71. The method of claim 64, wherein the direct biometric sample is obtained from the first party utilizing a fixed point of sale system.

72. The method of claim 64, wherein the private code is not a personal identification number (PIN).

73. The method of claim 64, wherein the first party to the transaction and the third party are not within arm'"'"'s reach of each other.

74. The method of claim 64, wherein the first party to the transaction and the third party are not located within the same physical facility.

75. The method of claim 64, wherein the first party does not have direct physical access to the third party.

76. The method of claim 65, wherein the first party to the transaction is an authorized transactor, and the second party is a point of transaction operator.

77. The method of claim 76, further comprising the steps of:

generating, by the point of transaction operator, a message to the third party, wherein the message includes the authorized transactor'"'"'s claimed identity, biometric information from the authorized transactor and a submission profile of the point of transaction.

78. The method of claim 64, wherein the obtaining step also includes additional information about the first party used by the third party.

79. The method of claim 78, wherein the additional information is public data.

80. The method of claim 78, wherein the additional information is private data.

81. The method of claim 78, wherein the additional information is selected from the group consisting of the first party'"'"'s date of birth, place of employment, group affiliations, company affiliations, and point of transaction loyalty club affiliations.

82. The method of claim 78, wherein the additional information is selected from the group consisting of the first party'"'"'s credit card, debit card, financial institution routing number, financial institution account number, electronic funds transfer, wire funds transfer, and electronic check information.

83. The method of claim 78, wherein the additional information is selected from the group consisting of the first party'"'"'s allergies, health conditions, medical history, credit rating, and health insurance information.

84. The method of claim 78, wherein the additional information is used by the third party to limit the database search.

85. A method for verifying a first party'"'"'s identity to a transaction using biometric sample data, comprising the steps of:

obtaining biometric sample data from the first party as part of the transaction, without requiring a private code;

transmitting the obtained first party'"'"'s biometric sample data to a remote third party centralized biometric authority (CBA) database for verification, the database having biometric information from a plurality of parties;

comparing the party'"'"'s biometric sample data, without the private code, against the biometric information stored on the CBA database;

verifying the identity of the first party when a match occurs during the comparison; and

issuing, by the CBA, a reply to a second party based upon the verification result.

86. The method of claim 85, wherein the private code is a personal identification number (PIN).

87. The method of claim 85, wherein the first party whose identity is being verified is an authorized transactor, and the party seeking verification is a point of transaction.

88. The method of claim 87, further comprising the steps of:

generating, by a point of transaction operator, a message to a CBA, wherein the message includes the authorized transactor'"'"'s claimed identity, a biometric sample of the authorized transactor and a submission profile of the point of transaction;

providing, at the CBA, verification of the authorized transactor'"'"'s biometric sample.

89. The method of claim 88, wherein the reply includes the authorized transactor'"'"'s verification information.

90. The method of claim 85, wherein the obtaining step also includes additional information about the first party used by the CBA to limit the database search.

91. The method of claim 90, wherein the additional information is public data.

92. The method of claim 85, wherein the additional information is private data.

93. The method of claim 90, wherein the additional information is selected from the group consisting of the first party'"'"'s date of birth, place of employment, group affiliations, company affiliations, or point of transaction loyalty club affiliations.

94. The method of claim 90, wherein the additional information is selected from the group consisting of the first party'"'"'s credit card, debit card, financial institution routing number, financial institution account number, electronic funds transfer, wire funds transfer, or electronic check information.

95. The method of claim 90, wherein the additional information is the first party'"'"'s credit rating.

96. The method of claim 90, wherein the additional information is selected from the group consisting of the first party'"'"'s allergies, health conditions, medical history or health insurance information.

97. The method of claim 90, wherein the additional information is used by the third party to limit the database search.

98. The method of claim 85 wherein obtaining step obtains a biometric sample of a proxy for the first party, and

issuing the a reply to the second party of a verification of the identity of the proxy following a comparison of the proxy'"'"'s biometric sample, with previously stored biometric information of the proxy, when there is a match.